CVE-2020-36758

The RSS Aggregator by Feedzy plugin through version 3.4.2 contains a cross-site request forgery vulnerability in the save_feedzy_post_type_meta() function, which fails to properly validate nonces. An attacker could exploit this flaw by crafting a malicious request that, if clicked by an administrator, would allow modification of post metadata without legitimate authorization. The vulnerability affects unauthenticated users and requires social engineering to succeed but poses a risk to site security and content integrity.

Based on public CVE data (MITRE/NVD).